{"action":"closed","number":3,"pull_request":{"url":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/3","id":143726212,"html_url":"https://github.com/RUB-NDS/CORStest/pull/3","diff_url":"https://github.com/RUB-NDS/CORStest/pull/3.diff","patch_url":"https://github.com/RUB-NDS/CORStest/pull/3.patch","issue_url":"https://api.github.com/repos/RUB-NDS/CORStest/issues/3","number":3,"state":"closed","locked":false,"title":"check if HTTPS websites allow HTTP origins","user":{"login":"ryanschulze","id":61995,"avatar_url":"https://avatars1.githubusercontent.com/u/61995?v=4","gravatar_id":"","url":"https://api.github.com/users/ryanschulze","html_url":"https://github.com/ryanschulze","followers_url":"https://api.github.com/users/ryanschulze/followers","following_url":"https://api.github.com/users/ryanschulze/following{/other_user}","gists_url":"https://api.github.com/users/ryanschulze/gists{/gist_id}","starred_url":"https://api.github.com/users/ryanschulze/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryanschulze/subscriptions","organizations_url":"https://api.github.com/users/ryanschulze/orgs","repos_url":"https://api.github.com/users/ryanschulze/repos","events_url":"https://api.github.com/users/ryanschulze/events{/privacy}","received_events_url":"https://api.github.com/users/ryanschulze/received_events","type":"User","site_admin":false},"body":"A small change to check if the destination website is running HTTPS but allowing HTTP origins. Such situations can be problematic since they make attack vectors via man-in-the-middle attacks possible that SSL was supposed to protect against.\r\n\r\nI'm quite the noob to python. So if there is a better way to achieve this, feel free to scrap the PR and implement a more effective version (e.g. my change only works if the website redirected http to https and ssl isn't forced in corstest.py).","created_at":"2017-09-28T18:47:10Z","updated_at":"2017-09-30T09:59:51Z","closed_at":"2017-09-30T09:59:51Z","merged_at":null,"merge_commit_sha":"1410377bc2df4b64036b7d4514c6b7827eae1cc0","assignee":null,"assignees":[],"requested_reviewers":[],"milestone":null,"commits_url":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/3/commits","review_comments_url":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/3/comments","review_comment_url":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/comments{/number}","comments_url":"https://api.github.com/repos/RUB-NDS/CORStest/issues/3/comments","statuses_url":"https://api.github.com/repos/RUB-NDS/CORStest/statuses/5150491211f606585fd430f747d55b0635eb2f72","head":{"label":"ryanschulze:https_http_mix","ref":"https_http_mix","sha":"5150491211f606585fd430f747d55b0635eb2f72","user":{"login":"ryanschulze","id":61995,"avatar_url":"https://avatars1.githubusercontent.com/u/61995?v=4","gravatar_id":"","url":"https://api.github.com/users/ryanschulze","html_url":"https://github.com/ryanschulze","followers_url":"https://api.github.com/users/ryanschulze/followers","following_url":"https://api.github.com/users/ryanschulze/following{/other_user}","gists_url":"https://api.github.com/users/ryanschulze/gists{/gist_id}","starred_url":"https://api.github.com/users/ryanschulze/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryanschulze/subscriptions","organizations_url":"https://api.github.com/users/ryanschulze/orgs","repos_url":"https://api.github.com/users/ryanschulze/repos","events_url":"https://api.github.com/users/ryanschulze/events{/privacy}","received_events_url":"https://api.github.com/users/ryanschulze/received_events","type":"User","site_admin":false},"repo":{"id":105183787,"name":"CORStest","full_name":"ryanschulze/CORStest","owner":{"login":"ryanschulze","id":61995,"avatar_url":"https://avatars1.githubusercontent.com/u/61995?v=4","gravatar_id":"","url":"https://api.github.com/users/ryanschulze","html_url":"https://github.com/ryanschulze","followers_url":"https://api.github.com/users/ryanschulze/followers","following_url":"https://api.github.com/users/ryanschulze/following{/other_user}","gists_url":"https://api.github.com/users/ryanschulze/gists{/gist_id}","starred_url":"https://api.github.com/users/ryanschulze/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ryanschulze/subscriptions","organizations_url":"https://api.github.com/users/ryanschulze/orgs","repos_url":"https://api.github.com/users/ryanschulze/repos","events_url":"https://api.github.com/users/ryanschulze/events{/privacy}","received_events_url":"https://api.github.com/users/ryanschulze/received_events","type":"User","site_admin":false},"private":false,"html_url":"https://github.com/ryanschulze/CORStest","description":"A simple CORS misconfiguration scanner","fork":true,"url":"https://api.github.com/repos/ryanschulze/CORStest","forks_url":"https://api.github.com/repos/ryanschulze/CORStest/forks","keys_url":"https://api.github.com/repos/ryanschulze/CORStest/keys{/key_id}","collaborators_url":"https://api.github.com/repos/ryanschulze/CORStest/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/ryanschulze/CORStest/teams","hooks_url":"https://api.github.com/repos/ryanschulze/CORStest/hooks","issue_events_url":"https://api.github.com/repos/ryanschulze/CORStest/issues/events{/number}","events_url":"https://api.github.com/repos/ryanschulze/CORStest/events","assignees_url":"https://api.github.com/repos/ryanschulze/CORStest/assignees{/user}","branches_url":"https://api.github.com/repos/ryanschulze/CORStest/branches{/branch}","tags_url":"https://api.github.com/repos/ryanschulze/CORStest/tags","blobs_url":"https://api.github.com/repos/ryanschulze/CORStest/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/ryanschulze/CORStest/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/ryanschulze/CORStest/git/refs{/sha}","trees_url":"https://api.github.com/repos/ryanschulze/CORStest/git/trees{/sha}","statuses_url":"https://api.github.com/repos/ryanschulze/CORStest/statuses/{sha}","languages_url":"https://api.github.com/repos/ryanschulze/CORStest/languages","stargazers_url":"https://api.github.com/repos/ryanschulze/CORStest/stargazers","contributors_url":"https://api.github.com/repos/ryanschulze/CORStest/contributors","subscribers_url":"https://api.github.com/repos/ryanschulze/CORStest/subscribers","subscription_url":"https://api.github.com/repos/ryanschulze/CORStest/subscription","commits_url":"https://api.github.com/repos/ryanschulze/CORStest/commits{/sha}","git_commits_url":"https://api.github.com/repos/ryanschulze/CORStest/git/commits{/sha}","comments_url":"https://api.github.com/repos/ryanschulze/CORStest/comments{/number}","issue_comment_url":"https://api.github.com/repos/ryanschulze/CORStest/issues/comments{/number}","contents_url":"https://api.github.com/repos/ryanschulze/CORStest/contents/{+path}","compare_url":"https://api.github.com/repos/ryanschulze/CORStest/compare/{base}...{head}","merges_url":"https://api.github.com/repos/ryanschulze/CORStest/merges","archive_url":"https://api.github.com/repos/ryanschulze/CORStest/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/ryanschulze/CORStest/downloads","issues_url":"https://api.github.com/repos/ryanschulze/CORStest/issues{/number}","pulls_url":"https://api.github.com/repos/ryanschulze/CORStest/pulls{/number}","milestones_url":"https://api.github.com/repos/ryanschulze/CORStest/milestones{/number}","notifications_url":"https://api.github.com/repos/ryanschulze/CORStest/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/ryanschulze/CORStest/labels{/name}","releases_url":"https://api.github.com/repos/ryanschulze/CORStest/releases{/id}","deployments_url":"https://api.github.com/repos/ryanschulze/CORStest/deployments","created_at":"2017-09-28T18:19:11Z","updated_at":"2017-09-28T18:19:12Z","pushed_at":"2017-09-28T18:36:16Z","git_url":"git://github.com/ryanschulze/CORStest.git","ssh_url":"git@github.com:ryanschulze/CORStest.git","clone_url":"https://github.com/ryanschulze/CORStest.git","svn_url":"https://github.com/ryanschulze/CORStest","homepage":"http://web-in-security.blogspot.de/2017/07/cors-misconfigurations-on-large-scale.html","size":2022,"stargazers_count":0,"watchers_count":0,"language":"Python","has_issues":false,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":0,"mirror_url":null,"open_issues_count":0,"forks":0,"open_issues":0,"watchers":0,"default_branch":"master"}},"base":{"label":"RUB-NDS:master","ref":"master","sha":"8b99cca1e4f6ec5ab5869c3a7285a4c6b101349c","user":{"login":"RUB-NDS","id":11559003,"avatar_url":"https://avatars3.githubusercontent.com/u/11559003?v=4","gravatar_id":"","url":"https://api.github.com/users/RUB-NDS","html_url":"https://github.com/RUB-NDS","followers_url":"https://api.github.com/users/RUB-NDS/followers","following_url":"https://api.github.com/users/RUB-NDS/following{/other_user}","gists_url":"https://api.github.com/users/RUB-NDS/gists{/gist_id}","starred_url":"https://api.github.com/users/RUB-NDS/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RUB-NDS/subscriptions","organizations_url":"https://api.github.com/users/RUB-NDS/orgs","repos_url":"https://api.github.com/users/RUB-NDS/repos","events_url":"https://api.github.com/users/RUB-NDS/events{/privacy}","received_events_url":"https://api.github.com/users/RUB-NDS/received_events","type":"Organization","site_admin":false},"repo":{"id":95961788,"name":"CORStest","full_name":"RUB-NDS/CORStest","owner":{"login":"RUB-NDS","id":11559003,"avatar_url":"https://avatars3.githubusercontent.com/u/11559003?v=4","gravatar_id":"","url":"https://api.github.com/users/RUB-NDS","html_url":"https://github.com/RUB-NDS","followers_url":"https://api.github.com/users/RUB-NDS/followers","following_url":"https://api.github.com/users/RUB-NDS/following{/other_user}","gists_url":"https://api.github.com/users/RUB-NDS/gists{/gist_id}","starred_url":"https://api.github.com/users/RUB-NDS/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/RUB-NDS/subscriptions","organizations_url":"https://api.github.com/users/RUB-NDS/orgs","repos_url":"https://api.github.com/users/RUB-NDS/repos","events_url":"https://api.github.com/users/RUB-NDS/events{/privacy}","received_events_url":"https://api.github.com/users/RUB-NDS/received_events","type":"Organization","site_admin":false},"private":false,"html_url":"https://github.com/RUB-NDS/CORStest","description":"A simple CORS misconfiguration scanner","fork":false,"url":"https://api.github.com/repos/RUB-NDS/CORStest","forks_url":"https://api.github.com/repos/RUB-NDS/CORStest/forks","keys_url":"https://api.github.com/repos/RUB-NDS/CORStest/keys{/key_id}","collaborators_url":"https://api.github.com/repos/RUB-NDS/CORStest/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/RUB-NDS/CORStest/teams","hooks_url":"https://api.github.com/repos/RUB-NDS/CORStest/hooks","issue_events_url":"https://api.github.com/repos/RUB-NDS/CORStest/issues/events{/number}","events_url":"https://api.github.com/repos/RUB-NDS/CORStest/events","assignees_url":"https://api.github.com/repos/RUB-NDS/CORStest/assignees{/user}","branches_url":"https://api.github.com/repos/RUB-NDS/CORStest/branches{/branch}","tags_url":"https://api.github.com/repos/RUB-NDS/CORStest/tags","blobs_url":"https://api.github.com/repos/RUB-NDS/CORStest/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/RUB-NDS/CORStest/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/RUB-NDS/CORStest/git/refs{/sha}","trees_url":"https://api.github.com/repos/RUB-NDS/CORStest/git/trees{/sha}","statuses_url":"https://api.github.com/repos/RUB-NDS/CORStest/statuses/{sha}","languages_url":"https://api.github.com/repos/RUB-NDS/CORStest/languages","stargazers_url":"https://api.github.com/repos/RUB-NDS/CORStest/stargazers","contributors_url":"https://api.github.com/repos/RUB-NDS/CORStest/contributors","subscribers_url":"https://api.github.com/repos/RUB-NDS/CORStest/subscribers","subscription_url":"https://api.github.com/repos/RUB-NDS/CORStest/subscription","commits_url":"https://api.github.com/repos/RUB-NDS/CORStest/commits{/sha}","git_commits_url":"https://api.github.com/repos/RUB-NDS/CORStest/git/commits{/sha}","comments_url":"https://api.github.com/repos/RUB-NDS/CORStest/comments{/number}","issue_comment_url":"https://api.github.com/repos/RUB-NDS/CORStest/issues/comments{/number}","contents_url":"https://api.github.com/repos/RUB-NDS/CORStest/contents/{+path}","compare_url":"https://api.github.com/repos/RUB-NDS/CORStest/compare/{base}...{head}","merges_url":"https://api.github.com/repos/RUB-NDS/CORStest/merges","archive_url":"https://api.github.com/repos/RUB-NDS/CORStest/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/RUB-NDS/CORStest/downloads","issues_url":"https://api.github.com/repos/RUB-NDS/CORStest/issues{/number}","pulls_url":"https://api.github.com/repos/RUB-NDS/CORStest/pulls{/number}","milestones_url":"https://api.github.com/repos/RUB-NDS/CORStest/milestones{/number}","notifications_url":"https://api.github.com/repos/RUB-NDS/CORStest/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/RUB-NDS/CORStest/labels{/name}","releases_url":"https://api.github.com/repos/RUB-NDS/CORStest/releases{/id}","deployments_url":"https://api.github.com/repos/RUB-NDS/CORStest/deployments","created_at":"2017-07-01T12:03:51Z","updated_at":"2017-09-27T19:10:13Z","pushed_at":"2017-09-28T18:47:11Z","git_url":"git://github.com/RUB-NDS/CORStest.git","ssh_url":"git@github.com:RUB-NDS/CORStest.git","clone_url":"https://github.com/RUB-NDS/CORStest.git","svn_url":"https://github.com/RUB-NDS/CORStest","homepage":"http://web-in-security.blogspot.de/2017/07/cors-misconfigurations-on-large-scale.html","size":2022,"stargazers_count":56,"watchers_count":56,"language":"Python","has_issues":true,"has_projects":true,"has_downloads":true,"has_wiki":true,"has_pages":false,"forks_count":12,"mirror_url":null,"open_issues_count":2,"forks":12,"open_issues":2,"watchers":56,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/3"},"html":{"href":"https://github.com/RUB-NDS/CORStest/pull/3"},"issue":{"href":"https://api.github.com/repos/RUB-NDS/CORStest/issues/3"},"comments":{"href":"https://api.github.com/repos/RUB-NDS/CORStest/issues/3/comments"},"review_comments":{"href":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/3/comments"},"review_comment":{"href":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/RUB-NDS/CORStest/pulls/3/commits"},"statuses":{"href":"https://api.github.com/repos/RUB-NDS/CORStest/statuses/5150491211f606585fd430f747d55b0635eb2f72"}},"author_association":"NONE","merged":false,"mergeable":true,"rebaseable":true,"mergeable_state":"clean","merged_by":null,"comments":2,"review_comments":0,"maintainer_can_modify":false,"commits":1,"additions":2,"deletions":0,"changed_files":1}}
{"actor":{"display_login":"jensvoid"}}